2 - Copyright (C) 2004-2008 Internet Systems Consortium, Inc. ("ISC")
4 - Permission to use, copy, modify, and/or distribute this software for any
5 - purpose with or without fee is hereby granted, provided that the above
6 - copyright notice and this permission notice appear in all copies.
8 - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
9 - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
10 - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
11 - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
12 - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
13 - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
14 - PERFORMANCE OF THIS SOFTWARE.
16 <!-- $Id: named.conf.html,v 1.45.48.1 2009-07-11 01:55:21 tbox Exp $ -->
19 <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
20 <title>named.conf</title>
21 <meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
23 <body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
24 <a name="id2476275"></a><div class="titlepage"></div>
25 <div class="refnamediv">
27 <p><code class="filename">named.conf</code> — configuration file for named</p>
29 <div class="refsynopsisdiv">
31 <div class="cmdsynopsis"><p><code class="command">named.conf</code> </p></div>
33 <div class="refsect1" lang="en">
34 <a name="id2543342"></a><h2>DESCRIPTION</h2>
35 <p><code class="filename">named.conf</code> is the configuration file
37 <span><strong class="command">named</strong></span>. Statements are enclosed
38 in braces and terminated with a semi-colon. Clauses in
39 the statements are also semi-colon terminated. The usual
40 comment styles are supported:
46 C++ style: // to end of line
49 Unix style: # to end of line
52 <div class="refsect1" lang="en">
53 <a name="id2543370"></a><h2>ACL</h2>
54 <div class="literallayout"><p><br>
55 acl <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
59 <div class="refsect1" lang="en">
60 <a name="id2543386"></a><h2>KEY</h2>
61 <div class="literallayout"><p><br>
62 key <em class="replaceable"><code>domain_name</code></em> {<br>
63 algorithm <em class="replaceable"><code>string</code></em>;<br>
64 secret <em class="replaceable"><code>string</code></em>;<br>
68 <div class="refsect1" lang="en">
69 <a name="id2543405"></a><h2>MASTERS</h2>
70 <div class="literallayout"><p><br>
71 masters <em class="replaceable"><code>string</code></em> [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
72 ( <em class="replaceable"><code>masters</code></em> | <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
73 <em class="replaceable"><code>ipv6_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] ) [<span class="optional"> key <em class="replaceable"><code>string</code></em> </span>]; ...<br>
77 <div class="refsect1" lang="en">
78 <a name="id2543451"></a><h2>SERVER</h2>
79 <div class="literallayout"><p><br>
80 server ( <em class="replaceable"><code>ipv4_address[<span class="optional">/prefixlen</span>]</code></em> | <em class="replaceable"><code>ipv6_address[<span class="optional">/prefixlen</span>]</code></em> ) {<br>
81 bogus <em class="replaceable"><code>boolean</code></em>;<br>
82 edns <em class="replaceable"><code>boolean</code></em>;<br>
83 edns-udp-size <em class="replaceable"><code>integer</code></em>;<br>
84 max-udp-size <em class="replaceable"><code>integer</code></em>;<br>
85 provide-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
86 request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
87 keys <em class="replaceable"><code>server_key</code></em>;<br>
88 transfers <em class="replaceable"><code>integer</code></em>;<br>
89 transfer-format ( many-answers | one-answer );<br>
90 transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
91 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
92 transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
93 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
95 support-ixfr <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
99 <div class="refsect1" lang="en">
100 <a name="id2543520"></a><h2>TRUSTED-KEYS</h2>
101 <div class="literallayout"><p><br>
103 <em class="replaceable"><code>domain_name</code></em> <em class="replaceable"><code>flags</code></em> <em class="replaceable"><code>protocol</code></em> <em class="replaceable"><code>algorithm</code></em> <em class="replaceable"><code>key</code></em>; ... <br>
107 <div class="refsect1" lang="en">
108 <a name="id2543545"></a><h2>CONTROLS</h2>
109 <div class="literallayout"><p><br>
111 inet ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
112 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>]<br>
113 allow { <em class="replaceable"><code>address_match_element</code></em>; ... }<br>
114 [<span class="optional"> keys { <em class="replaceable"><code>string</code></em>; ... } </span>];<br>
115 unix <em class="replaceable"><code>unsupported</code></em>; // not implemented<br>
119 <div class="refsect1" lang="en">
120 <a name="id2543580"></a><h2>LOGGING</h2>
121 <div class="literallayout"><p><br>
123 channel <em class="replaceable"><code>string</code></em> {<br>
124 file <em class="replaceable"><code>log_file</code></em>;<br>
125 syslog <em class="replaceable"><code>optional_facility</code></em>;<br>
128 severity <em class="replaceable"><code>log_severity</code></em>;<br>
129 print-time <em class="replaceable"><code>boolean</code></em>;<br>
130 print-severity <em class="replaceable"><code>boolean</code></em>;<br>
131 print-category <em class="replaceable"><code>boolean</code></em>;<br>
133 category <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>string</code></em>; ... };<br>
137 <div class="refsect1" lang="en">
138 <a name="id2543619"></a><h2>LWRES</h2>
139 <div class="literallayout"><p><br>
141 listen-on [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
142 ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ...<br>
144 view <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>optional_class</code></em>;<br>
145 search { <em class="replaceable"><code>string</code></em>; ... };<br>
146 ndots <em class="replaceable"><code>integer</code></em>;<br>
150 <div class="refsect1" lang="en">
151 <a name="id2543660"></a><h2>OPTIONS</h2>
152 <div class="literallayout"><p><br>
154 avoid-v4-udp-ports { <em class="replaceable"><code>port</code></em>; ... };<br>
155 avoid-v6-udp-ports { <em class="replaceable"><code>port</code></em>; ... };<br>
156 blackhole { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
157 coresize <em class="replaceable"><code>size</code></em>;<br>
158 datasize <em class="replaceable"><code>size</code></em>;<br>
159 directory <em class="replaceable"><code>quoted_string</code></em>;<br>
160 dump-file <em class="replaceable"><code>quoted_string</code></em>;<br>
161 files <em class="replaceable"><code>size</code></em>;<br>
162 heartbeat-interval <em class="replaceable"><code>integer</code></em>;<br>
163 host-statistics <em class="replaceable"><code>boolean</code></em>; // not implemented<br>
164 host-statistics-max <em class="replaceable"><code>number</code></em>; // not implemented<br>
165 hostname ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
166 interface-interval <em class="replaceable"><code>integer</code></em>;<br>
167 listen-on [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
168 listen-on-v6 [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
169 match-mapped-addresses <em class="replaceable"><code>boolean</code></em>;<br>
170 memstatistics-file <em class="replaceable"><code>quoted_string</code></em>;<br>
171 pid-file ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
172 port <em class="replaceable"><code>integer</code></em>;<br>
173 querylog <em class="replaceable"><code>boolean</code></em>;<br>
174 recursing-file <em class="replaceable"><code>quoted_string</code></em>;<br>
175 reserved-sockets <em class="replaceable"><code>integer</code></em>;<br>
176 random-device <em class="replaceable"><code>quoted_string</code></em>;<br>
177 recursive-clients <em class="replaceable"><code>integer</code></em>;<br>
178 serial-query-rate <em class="replaceable"><code>integer</code></em>;<br>
179 server-id ( <em class="replaceable"><code>quoted_string</code></em> | none |;<br>
180 stacksize <em class="replaceable"><code>size</code></em>;<br>
181 statistics-file <em class="replaceable"><code>quoted_string</code></em>;<br>
182 statistics-interval <em class="replaceable"><code>integer</code></em>; // not yet implemented<br>
183 tcp-clients <em class="replaceable"><code>integer</code></em>;<br>
184 tcp-listen-queue <em class="replaceable"><code>integer</code></em>;<br>
185 tkey-dhkey <em class="replaceable"><code>quoted_string</code></em> <em class="replaceable"><code>integer</code></em>;<br>
186 tkey-gssapi-credential <em class="replaceable"><code>quoted_string</code></em>;<br>
187 tkey-domain <em class="replaceable"><code>quoted_string</code></em>;<br>
188 transfers-per-ns <em class="replaceable"><code>integer</code></em>;<br>
189 transfers-in <em class="replaceable"><code>integer</code></em>;<br>
190 transfers-out <em class="replaceable"><code>integer</code></em>;<br>
191 use-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
192 version ( <em class="replaceable"><code>quoted_string</code></em> | none );<br>
193 allow-recursion { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
194 allow-recursion-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
195 sortlist { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
196 topology { <em class="replaceable"><code>address_match_element</code></em>; ... }; // not implemented<br>
197 auth-nxdomain <em class="replaceable"><code>boolean</code></em>; // default changed<br>
198 minimal-responses <em class="replaceable"><code>boolean</code></em>;<br>
199 recursion <em class="replaceable"><code>boolean</code></em>;<br>
201 [<span class="optional"> class <em class="replaceable"><code>string</code></em> </span>] [<span class="optional"> type <em class="replaceable"><code>string</code></em> </span>]<br>
202 [<span class="optional"> name <em class="replaceable"><code>quoted_string</code></em> </span>] <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em>; ...<br>
204 provide-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
205 request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
206 rfc2308-type1 <em class="replaceable"><code>boolean</code></em>; // not yet implemented<br>
207 additional-from-auth <em class="replaceable"><code>boolean</code></em>;<br>
208 additional-from-cache <em class="replaceable"><code>boolean</code></em>;<br>
209 query-source ( ( <em class="replaceable"><code>ipv4_address</code></em> | * ) | [<span class="optional"> address ( <em class="replaceable"><code>ipv4_address</code></em> | * ) </span>] ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
210 query-source-v6 ( ( <em class="replaceable"><code>ipv6_address</code></em> | * ) | [<span class="optional"> address ( <em class="replaceable"><code>ipv6_address</code></em> | * ) </span>] ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
211 use-queryport-pool <em class="replaceable"><code>boolean</code></em>;<br>
212 queryport-pool-ports <em class="replaceable"><code>integer</code></em>;<br>
213 queryport-pool-updateinterval <em class="replaceable"><code>integer</code></em>;<br>
214 cleaning-interval <em class="replaceable"><code>integer</code></em>;<br>
215 min-roots <em class="replaceable"><code>integer</code></em>; // not implemented<br>
216 lame-ttl <em class="replaceable"><code>integer</code></em>;<br>
217 max-ncache-ttl <em class="replaceable"><code>integer</code></em>;<br>
218 max-cache-ttl <em class="replaceable"><code>integer</code></em>;<br>
219 transfer-format ( many-answers | one-answer );<br>
220 max-cache-size <em class="replaceable"><code>size</code></em>;<br>
221 max-acache-size <em class="replaceable"><code>size</code></em>;<br>
222 clients-per-query <em class="replaceable"><code>number</code></em>;<br>
223 max-clients-per-query <em class="replaceable"><code>number</code></em>;<br>
224 check-names ( master | slave | response )<br>
225 ( fail | warn | ignore );<br>
226 check-mx ( fail | warn | ignore );<br>
227 check-integrity <em class="replaceable"><code>boolean</code></em>;<br>
228 check-mx-cname ( fail | warn | ignore );<br>
229 check-srv-cname ( fail | warn | ignore );<br>
230 cache-file <em class="replaceable"><code>quoted_string</code></em>; // test option<br>
231 suppress-initial-notify <em class="replaceable"><code>boolean</code></em>; // not yet implemented<br>
232 preferred-glue <em class="replaceable"><code>string</code></em>;<br>
233 dual-stack-servers [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
234 ( <em class="replaceable"><code>quoted_string</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
235 <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
236 <em class="replaceable"><code>ipv6_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] ); ...<br>
238 edns-udp-size <em class="replaceable"><code>integer</code></em>;<br>
239 max-udp-size <em class="replaceable"><code>integer</code></em>;<br>
240 root-delegation-only [<span class="optional"> exclude { <em class="replaceable"><code>quoted_string</code></em>; ... } </span>];<br>
241 disable-algorithms <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>string</code></em>; ... };<br>
242 dnssec-enable <em class="replaceable"><code>boolean</code></em>;<br>
243 dnssec-validation <em class="replaceable"><code>boolean</code></em>;<br>
244 dnssec-lookaside <em class="replaceable"><code>string</code></em> trust-anchor <em class="replaceable"><code>string</code></em>;<br>
245 dnssec-must-be-secure <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>boolean</code></em>;<br>
246 dnssec-accept-expired <em class="replaceable"><code>boolean</code></em>;<br>
248 empty-server <em class="replaceable"><code>string</code></em>;<br>
249 empty-contact <em class="replaceable"><code>string</code></em>;<br>
250 empty-zones-enable <em class="replaceable"><code>boolean</code></em>;<br>
251 disable-empty-zone <em class="replaceable"><code>string</code></em>;<br>
253 dialup <em class="replaceable"><code>dialuptype</code></em>;<br>
254 ixfr-from-differences <em class="replaceable"><code>ixfrdiff</code></em>;<br>
256 allow-query { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
257 allow-query-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
258 allow-query-cache { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
259 allow-query-cache-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
260 allow-transfer { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
261 allow-update { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
262 allow-update-forwarding { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
263 update-check-ksk <em class="replaceable"><code>boolean</code></em>;<br>
265 masterfile-format ( text | raw );<br>
266 notify <em class="replaceable"><code>notifytype</code></em>;<br>
267 notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
268 notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
269 notify-delay <em class="replaceable"><code>seconds</code></em>;<br>
270 notify-to-soa <em class="replaceable"><code>boolean</code></em>;<br>
271 also-notify [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> )<br>
272 [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ... };<br>
273 allow-notify { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
275 forward ( first | only );<br>
276 forwarders [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
277 ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ...<br>
280 max-journal-size <em class="replaceable"><code>size_no_default</code></em>;<br>
281 max-transfer-time-in <em class="replaceable"><code>integer</code></em>;<br>
282 max-transfer-time-out <em class="replaceable"><code>integer</code></em>;<br>
283 max-transfer-idle-in <em class="replaceable"><code>integer</code></em>;<br>
284 max-transfer-idle-out <em class="replaceable"><code>integer</code></em>;<br>
285 max-retry-time <em class="replaceable"><code>integer</code></em>;<br>
286 min-retry-time <em class="replaceable"><code>integer</code></em>;<br>
287 max-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
288 min-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
289 multi-master <em class="replaceable"><code>boolean</code></em>;<br>
291 sig-validity-interval <em class="replaceable"><code>integer</code></em>;<br>
292 sig-re-signing-interval <em class="replaceable"><code>integer</code></em>;<br>
293 sig-signing-nodes <em class="replaceable"><code>integer</code></em>;<br>
294 sig-signing-signatures <em class="replaceable"><code>integer</code></em>;<br>
295 sig-signing-type <em class="replaceable"><code>integer</code></em>;<br>
297 transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
298 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
299 transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
300 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
302 alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
303 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
304 alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
305 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
306 use-alt-transfer-source <em class="replaceable"><code>boolean</code></em>;<br>
308 zone-statistics <em class="replaceable"><code>boolean</code></em>;<br>
309 key-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
310 try-tcp-refresh <em class="replaceable"><code>boolean</code></em>;<br>
311 zero-no-soa-ttl <em class="replaceable"><code>boolean</code></em>;<br>
312 zero-no-soa-ttl-cache <em class="replaceable"><code>boolean</code></em>;<br>
314 nsec3-test-zone <em class="replaceable"><code>boolean</code></em>; // testing only<br>
316 allow-v6-synthesis { <em class="replaceable"><code>address_match_element</code></em>; ... }; // obsolete<br>
317 deallocate-on-exit <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
318 fake-iquery <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
319 fetch-glue <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
320 has-old-clients <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
321 maintain-ixfr-base <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
322 max-ixfr-log-size <em class="replaceable"><code>size</code></em>; // obsolete<br>
323 multiple-cnames <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
324 named-xfer <em class="replaceable"><code>quoted_string</code></em>; // obsolete<br>
325 serial-queries <em class="replaceable"><code>integer</code></em>; // obsolete<br>
326 treat-cr-as-space <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
327 use-id-pool <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
331 <div class="refsect1" lang="en">
332 <a name="id2544452"></a><h2>VIEW</h2>
333 <div class="literallayout"><p><br>
334 view <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>optional_class</code></em> {<br>
335 match-clients { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
336 match-destinations { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
337 match-recursive-only <em class="replaceable"><code>boolean</code></em>;<br>
339 key <em class="replaceable"><code>string</code></em> {<br>
340 algorithm <em class="replaceable"><code>string</code></em>;<br>
341 secret <em class="replaceable"><code>string</code></em>;<br>
344 zone <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>optional_class</code></em> {<br>
348 server ( <em class="replaceable"><code>ipv4_address[<span class="optional">/prefixlen</span>]</code></em> | <em class="replaceable"><code>ipv6_address[<span class="optional">/prefixlen</span>]</code></em> ) {<br>
353 <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>quoted_string</code></em>; ...<br>
356 allow-recursion { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
357 allow-recursion-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
358 sortlist { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
359 topology { <em class="replaceable"><code>address_match_element</code></em>; ... }; // not implemented<br>
360 auth-nxdomain <em class="replaceable"><code>boolean</code></em>; // default changed<br>
361 minimal-responses <em class="replaceable"><code>boolean</code></em>;<br>
362 recursion <em class="replaceable"><code>boolean</code></em>;<br>
364 [<span class="optional"> class <em class="replaceable"><code>string</code></em> </span>] [<span class="optional"> type <em class="replaceable"><code>string</code></em> </span>]<br>
365 [<span class="optional"> name <em class="replaceable"><code>quoted_string</code></em> </span>] <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em>; ...<br>
367 provide-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
368 request-ixfr <em class="replaceable"><code>boolean</code></em>;<br>
369 rfc2308-type1 <em class="replaceable"><code>boolean</code></em>; // not yet implemented<br>
370 additional-from-auth <em class="replaceable"><code>boolean</code></em>;<br>
371 additional-from-cache <em class="replaceable"><code>boolean</code></em>;<br>
372 query-source ( ( <em class="replaceable"><code>ipv4_address</code></em> | * ) | [<span class="optional"> address ( <em class="replaceable"><code>ipv4_address</code></em> | * ) </span>] ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
373 query-source-v6 ( ( <em class="replaceable"><code>ipv6_address</code></em> | * ) | [<span class="optional"> address ( <em class="replaceable"><code>ipv6_address</code></em> | * ) </span>] ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
374 use-queryport-pool <em class="replaceable"><code>boolean</code></em>;<br>
375 queryport-pool-ports <em class="replaceable"><code>integer</code></em>;<br>
376 queryport-pool-updateinterval <em class="replaceable"><code>integer</code></em>;<br>
377 cleaning-interval <em class="replaceable"><code>integer</code></em>;<br>
378 min-roots <em class="replaceable"><code>integer</code></em>; // not implemented<br>
379 lame-ttl <em class="replaceable"><code>integer</code></em>;<br>
380 max-ncache-ttl <em class="replaceable"><code>integer</code></em>;<br>
381 max-cache-ttl <em class="replaceable"><code>integer</code></em>;<br>
382 transfer-format ( many-answers | one-answer );<br>
383 max-cache-size <em class="replaceable"><code>size</code></em>;<br>
384 max-acache-size <em class="replaceable"><code>size</code></em>;<br>
385 clients-per-query <em class="replaceable"><code>number</code></em>;<br>
386 max-clients-per-query <em class="replaceable"><code>number</code></em>;<br>
387 check-names ( master | slave | response )<br>
388 ( fail | warn | ignore );<br>
389 check-mx ( fail | warn | ignore );<br>
390 check-integrity <em class="replaceable"><code>boolean</code></em>;<br>
391 check-mx-cname ( fail | warn | ignore );<br>
392 check-srv-cname ( fail | warn | ignore );<br>
393 cache-file <em class="replaceable"><code>quoted_string</code></em>; // test option<br>
394 suppress-initial-notify <em class="replaceable"><code>boolean</code></em>; // not yet implemented<br>
395 preferred-glue <em class="replaceable"><code>string</code></em>;<br>
396 dual-stack-servers [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
397 ( <em class="replaceable"><code>quoted_string</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
398 <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
399 <em class="replaceable"><code>ipv6_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] ); ...<br>
401 edns-udp-size <em class="replaceable"><code>integer</code></em>;<br>
402 max-udp-size <em class="replaceable"><code>integer</code></em>;<br>
403 root-delegation-only [<span class="optional"> exclude { <em class="replaceable"><code>quoted_string</code></em>; ... } </span>];<br>
404 disable-algorithms <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>string</code></em>; ... };<br>
405 dnssec-enable <em class="replaceable"><code>boolean</code></em>;<br>
406 dnssec-validation <em class="replaceable"><code>boolean</code></em>;<br>
407 dnssec-lookaside <em class="replaceable"><code>string</code></em> trust-anchor <em class="replaceable"><code>string</code></em>;<br>
408 dnssec-must-be-secure <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>boolean</code></em>;<br>
409 dnssec-accept-expired <em class="replaceable"><code>boolean</code></em>;<br>
411 empty-server <em class="replaceable"><code>string</code></em>;<br>
412 empty-contact <em class="replaceable"><code>string</code></em>;<br>
413 empty-zones-enable <em class="replaceable"><code>boolean</code></em>;<br>
414 disable-empty-zone <em class="replaceable"><code>string</code></em>;<br>
416 dialup <em class="replaceable"><code>dialuptype</code></em>;<br>
417 ixfr-from-differences <em class="replaceable"><code>ixfrdiff</code></em>;<br>
419 allow-query { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
420 allow-query-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
421 allow-query-cache { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
422 allow-query-cache-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
423 allow-transfer { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
424 allow-update { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
425 allow-update-forwarding { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
426 update-check-ksk <em class="replaceable"><code>boolean</code></em>;<br>
428 masterfile-format ( text | raw );<br>
429 notify <em class="replaceable"><code>notifytype</code></em>;<br>
430 notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
431 notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
432 notify-delay <em class="replaceable"><code>seconds</code></em>;<br>
433 notify-to-soa <em class="replaceable"><code>boolean</code></em>;<br>
434 also-notify [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> )<br>
435 [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ... };<br>
436 allow-notify { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
438 forward ( first | only );<br>
439 forwarders [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
440 ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ...<br>
443 max-journal-size <em class="replaceable"><code>size_no_default</code></em>;<br>
444 max-transfer-time-in <em class="replaceable"><code>integer</code></em>;<br>
445 max-transfer-time-out <em class="replaceable"><code>integer</code></em>;<br>
446 max-transfer-idle-in <em class="replaceable"><code>integer</code></em>;<br>
447 max-transfer-idle-out <em class="replaceable"><code>integer</code></em>;<br>
448 max-retry-time <em class="replaceable"><code>integer</code></em>;<br>
449 min-retry-time <em class="replaceable"><code>integer</code></em>;<br>
450 max-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
451 min-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
452 multi-master <em class="replaceable"><code>boolean</code></em>;<br>
453 sig-validity-interval <em class="replaceable"><code>integer</code></em>;<br>
455 transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
456 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
457 transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
458 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
460 alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
461 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
462 alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
463 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
464 use-alt-transfer-source <em class="replaceable"><code>boolean</code></em>;<br>
466 zone-statistics <em class="replaceable"><code>boolean</code></em>;<br>
467 try-tcp-refresh <em class="replaceable"><code>boolean</code></em>;<br>
468 key-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
469 zero-no-soa-ttl <em class="replaceable"><code>boolean</code></em>;<br>
470 zero-no-soa-ttl-cache <em class="replaceable"><code>boolean</code></em>;<br>
472 allow-v6-synthesis { <em class="replaceable"><code>address_match_element</code></em>; ... }; // obsolete<br>
473 fetch-glue <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
474 maintain-ixfr-base <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
475 max-ixfr-log-size <em class="replaceable"><code>size</code></em>; // obsolete<br>
479 <div class="refsect1" lang="en">
480 <a name="id2545113"></a><h2>ZONE</h2>
481 <div class="literallayout"><p><br>
482 zone <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>optional_class</code></em> {<br>
483 type ( master | slave | stub | hint |<br>
484 forward | delegation-only );<br>
485 file <em class="replaceable"><code>quoted_string</code></em>;<br>
487 masters [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
488 ( <em class="replaceable"><code>masters</code></em> |<br>
489 <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
490 <em class="replaceable"><code>ipv6_address</code></em> [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] ) [<span class="optional"> key <em class="replaceable"><code>string</code></em> </span>]; ...<br>
493 database <em class="replaceable"><code>string</code></em>;<br>
494 delegation-only <em class="replaceable"><code>boolean</code></em>;<br>
495 check-names ( fail | warn | ignore );<br>
496 check-mx ( fail | warn | ignore );<br>
497 check-integrity <em class="replaceable"><code>boolean</code></em>;<br>
498 check-mx-cname ( fail | warn | ignore );<br>
499 check-srv-cname ( fail | warn | ignore );<br>
500 dialup <em class="replaceable"><code>dialuptype</code></em>;<br>
501 ixfr-from-differences <em class="replaceable"><code>boolean</code></em>;<br>
502 journal <em class="replaceable"><code>quoted_string</code></em>;<br>
503 zero-no-soa-ttl <em class="replaceable"><code>boolean</code></em>;<br>
505 allow-query { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
506 allow-query-on { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
507 allow-transfer { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
508 allow-update { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
509 allow-update-forwarding { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
511 ( grant | deny ) <em class="replaceable"><code>string</code></em><br>
512 ( name | subdomain | wildcard | self | selfsub | selfwild |<br>
513 krb5-self | ms-self | krb5-subdomain | ms-subdomain |<br>
514 tcp-self | 6to4-self ) <em class="replaceable"><code>string</code></em><br>
515 <em class="replaceable"><code>rrtypelist</code></em>; ...<br>
517 update-check-ksk <em class="replaceable"><code>boolean</code></em>;<br>
519 masterfile-format ( text | raw );<br>
520 notify <em class="replaceable"><code>notifytype</code></em>;<br>
521 notify-source ( <em class="replaceable"><code>ipv4_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
522 notify-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
523 notify-delay <em class="replaceable"><code>seconds</code></em>;<br>
524 notify-to-soa <em class="replaceable"><code>boolean</code></em>;<br>
525 also-notify [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] { ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> )<br>
526 [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ... };<br>
527 allow-notify { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
529 forward ( first | only );<br>
530 forwarders [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
531 ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> ) [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>]; ...<br>
534 max-journal-size <em class="replaceable"><code>size_no_default</code></em>;<br>
535 max-transfer-time-in <em class="replaceable"><code>integer</code></em>;<br>
536 max-transfer-time-out <em class="replaceable"><code>integer</code></em>;<br>
537 max-transfer-idle-in <em class="replaceable"><code>integer</code></em>;<br>
538 max-transfer-idle-out <em class="replaceable"><code>integer</code></em>;<br>
539 max-retry-time <em class="replaceable"><code>integer</code></em>;<br>
540 min-retry-time <em class="replaceable"><code>integer</code></em>;<br>
541 max-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
542 min-refresh-time <em class="replaceable"><code>integer</code></em>;<br>
543 multi-master <em class="replaceable"><code>boolean</code></em>;<br>
544 sig-validity-interval <em class="replaceable"><code>integer</code></em>;<br>
546 transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
547 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
548 transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
549 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
551 alt-transfer-source ( <em class="replaceable"><code>ipv4_address</code></em> | * )<br>
552 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
553 alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
554 [<span class="optional"> port ( <em class="replaceable"><code>integer</code></em> | * ) </span>];<br>
555 use-alt-transfer-source <em class="replaceable"><code>boolean</code></em>;<br>
557 zone-statistics <em class="replaceable"><code>boolean</code></em>;<br>
558 try-tcp-refresh <em class="replaceable"><code>boolean</code></em>;<br>
559 key-directory <em class="replaceable"><code>quoted_string</code></em>;<br>
561 nsec3-test-zone <em class="replaceable"><code>boolean</code></em>; // testing only<br>
563 ixfr-base <em class="replaceable"><code>quoted_string</code></em>; // obsolete<br>
564 ixfr-tmp-file <em class="replaceable"><code>quoted_string</code></em>; // obsolete<br>
565 maintain-ixfr-base <em class="replaceable"><code>boolean</code></em>; // obsolete<br>
566 max-ixfr-log-size <em class="replaceable"><code>size</code></em>; // obsolete<br>
567 pubkey <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>quoted_string</code></em>; // obsolete<br>
571 <div class="refsect1" lang="en">
572 <a name="id2545410"></a><h2>FILES</h2>
573 <p><code class="filename">/etc/named.conf</code>
576 <div class="refsect1" lang="en">
577 <a name="id2545421"></a><h2>SEE ALSO</h2>
578 <p><span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
579 <span class="citerefentry"><span class="refentrytitle">named-checkconf</span>(8)</span>,
580 <span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
581 <em class="citetitle">BIND 9 Administrator Reference Manual</em>.